[php-src] PR #24059: Fix OSS-Fuzz #568005340: FETCH_DIM_FUNC_ARG partial conversion
| From: | ndossche | Date: | Thu, 01 Oct 2026 20:47:33 +0000 |
| Subject: | [php-src] PR #24059: Fix OSS-Fuzz #568005340: FETCH_DIM_FUNC_ARG partial conversion | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39055@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24059
Author: ndossche
The new call is compiled to FETCH_DIM_FUNC_ARG going to FETCH_OBJ_FUNC_ARG. It tries to convert the
FETCH_*_FUNC_ARG to FETCH_*_R, but it skips FETCH_DIM_FUNC_ARG with the UNUSED op2, and erroneously
converts the next FETCH_OBJ_FUNC_ARG to FETCH_OBJ_R, which is an unexpected state for the optimizer.
Interestingly, the reference path already had the appropriate check, so we move the check upwards
and do the same thing as the reference path.